chore: finish token service and half way auth middleware

Author: phamphihungbk

server/internal/repository/user_repository.go

@@ -6,7 +6,7 @@ import (
 )
 
 type IUserRepository interface {
-	GetAll(limit int, page int, sort string) ([]*model.User, error)
+	GetAll(limit int, page int, sort string) (*model.UsersConnection, error)
 	FindByEmail(email string) (*model.User, error)
 	Create(input model.CreateUserPayload) (*model.User, error)
 	Update(input model.UpdateUserPayload) (*model.User, error)
@@ -23,17 +23,17 @@ func NewUserRepository(db *gorm.DB) *UserRepository {
 	}
 }
 
-func (r *UserRepository) GetAll(limit int, page int, sort string) (*model.UserConnection, error) {
+func (r *UserRepository) GetAll(limit int, page int, sort string) (*model.UsersConnection, error) {
 	var users []*model.User
 	query := paginate(limit, page, sort)
 	err := r.db.Scopes(query).Find(&users).Error
 	pageInfo := &model.PageInfo{limit, page, sort}
 
 	if err != nil {
-		return &model.UserConnection{nil, pageInfo}, err
+		return &model.UsersConnection{PageInfo: pageInfo}, err
 	}
 
-	return &model.UserConnection{users, pageInfo}, nil
+	return &model.UsersConnection{Edges: users, PageInfo: pageInfo}, nil
 }
 
 func (r *UserRepository) FindByEmail(email string) (*model.User, error) {

server/internal/service/token_service.go

@@ -1,8 +1,9 @@
 package service
 
 import (
-	jwt "github.com/golang-jwt/jwt/v5"
-	"github.com/phamphihungbk/go-graphql/internal/model"
+	"fmt"
+	"github.com/golang-jwt/jwt/v5"
+	"github.com/phamphihungbk/go-graphql-api/internal/model"
 	"time"
 )
 
@@ -14,8 +15,8 @@ const (
 )
 
 type ITokenService interface {
-	generate() (Token, error)
-	validate() error
+	create(user *model.User) (string, error)
+	validate(tokenString string) (jwt.MapClaims, error)
 }
 
 type TokenService struct {
@@ -25,12 +26,12 @@ func NewTokenService() *TokenService {
 	return &TokenService{}
 }
 
-func (s *TokenService) generate(user *model.User) string {
+func (s *TokenService) create(user *model.User) (string, error) {
 	issuedTime := time.Now().Unix()
 	expiredTime := issuedTime + ExpiredInterval
 
 	token := jwt.NewWithClaims(
-		jwt.SigningMethodES256,
+		jwt.SigningMethodHS256,
 		jwt.MapClaims{
 			"iss":   Issuer,
 			"sub":   user.ID,
@@ -45,6 +46,20 @@ func (s *TokenService) generate(user *model.User) string {
 	return token.SignedString(PrivateKey)
 }
 
-func (s *TokenService) validate() error {
-	return nil
+func (s *TokenService) validate(tokenString string) (jwt.MapClaims, error) {
+	var hmacSampleSecret []byte
+	token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
+		if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {
+			return nil, fmt.Errorf("Unexpected signing method: %v", token.Header["alg"])
+		}
+
+		return hmacSampleSecret, nil
+	})
+
+	claims, ok := token.Claims.(jwt.MapClaims)
+	if ok && token.Valid {
+		return claims, nil
+	}
+
+	return nil, err
 }

server/internal/service/user_service.go

@@ -8,7 +8,7 @@ import (
 )
 
 type IUserService interface {
-	GetAllUsers(limit int, page int, sort string) (*model.UserConnection, error)
+	GetAllUsers(limit int, page int, sort string) (*model.UsersConnection, error)
 	GetUser(email string) (*model.User, error)
 	IssueToken(payload model.LoginPayload) (*model.AccessToken, error)
 	CreateUser(payload model.CreateUserPayload) (*model.User, error)
@@ -25,7 +25,7 @@ func NewUserService(repository *repository.UserRepository, tokenService *TokenSe
 	return &UserService{repository, tokenService}
 }
 
-func (s *UserService) GetAllItems(limit int, page int, sort string) (*model.UserConnection, error) {
+func (s *UserService) GetAllUsers(limit int, page int, sort string) (*model.UsersConnection, error) {
 	return s.repository.GetAll(limit, page, sort)
 }
 
@@ -34,7 +34,7 @@ func (s *UserService) GetUser(email string) (*model.User, error) {
 }
 
 func (s *UserService) IssueToken(payload model.LoginPayload) (*model.AccessToken, error) {
-	user, err := s.FindByEmail(payload.Email)
+	user, err := s.repository.FindByEmail(payload.Email)
 	if err != nil {
 		return nil, err
 	}
@@ -43,9 +43,13 @@ func (s *UserService) IssueToken(payload model.LoginPayload) (*model.AccessToken
 		return nil, err
 	}
 
-	token := s.tokenService.generate(user)
+	token, err := s.tokenService.create(user)
 
-	return &model.AccessToken{token}, nil
+	if err != nil {
+		return nil, err
+	}
+
+	return &model.AccessToken{Token: token}, nil
 }
 
 func (s *UserService) CreateUser(payload model.CreateUserPayload) (*model.User, error) {